Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/PWTuN1BA9DuC7F1ewnt91vku1PU.roa
File: PWTuN1BA9DuC7F1ewnt91vku1PU.roa (raw, json)
Hash identifier: KX6WHfkOL2NP4+TGSYt+meeF4Nrb1VcK8l1oTMn1f1o=
Subject key identifier: 3D:64:EE:37:50:40:F4:3B:82:EC:5D:5E:C2:7B:7D:D6:F9:2E:D4:F5
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01856F82420D7570D7F85AB317511B2B1A88
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/PWTuN1BA9DuC7F1ewnt91vku1PU.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 195.13.61.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:42:0d:75:70:d7:f8:5a:b3:17:51:1b:2b:1a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d64ee375040f43b82ec5d5ec27b7dd6f92ed4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:68:11:5f:62:47:78:cf:b3:29:b5:e2:6b:
ad:3c:89:84:68:b9:e9:84:48:e3:3f:f4:9b:88:42:
b9:8f:45:b2:6c:22:e2:b4:38:0c:f4:b7:fd:03:62:
f6:32:9d:46:a6:d2:eb:90:78:bf:06:9d:8a:66:b2:
e1:c1:5f:f3:1a:ba:d5:fa:d5:88:d6:10:87:c9:b9:
90:1e:ec:88:65:a0:51:d1:b7:a1:99:97:4c:57:74:
99:ec:2e:a4:b0:cb:95:22:54:ad:eb:da:ff:ab:68:
42:3a:83:51:ae:00:41:4d:fa:90:ce:bd:fd:26:d8:
12:f7:94:68:46:25:52:4a:09:b7:aa:34:64:a5:cf:
ea:ac:81:ab:d5:e4:31:12:a0:78:cf:f5:ca:bc:86:
89:8a:ab:bc:3d:4c:bc:b7:6e:ef:86:bc:15:5a:c4:
37:9d:e5:43:cf:53:26:97:8a:81:98:69:27:e3:43:
cb:34:04:56:60:1f:a2:ad:ae:08:8c:3a:ae:8b:df:
67:a6:8c:d4:4d:fd:35:ae:9f:1e:65:f4:1d:1b:ba:
7b:6d:3c:3a:74:7a:55:71:76:c7:26:0d:d6:dd:e5:
3a:c0:a6:6b:81:89:5a:04:c8:fd:2d:23:51:62:92:
bc:3a:f3:0e:a2:7a:01:db:4b:d0:a8:00:96:87:d1:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:EE:37:50:40:F4:3B:82:EC:5D:5E:C2:7B:7D:D6:F9:2E:D4:F5
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/PWTuN1BA9DuC7F1ewnt91vku1PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.61.0/24
195.13.63.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:6f:89:f2:23:e4:99:16:cd:d3:ef:be:af:21:f9:e9:6e:
da:87:25:eb:68:8b:93:bb:04:c4:2c:b0:91:3d:95:4f:77:c8:
94:fa:67:af:af:64:3c:a1:54:05:24:48:46:0e:84:0d:0f:4a:
2f:61:bf:06:ac:1f:11:9f:55:21:3b:80:a0:ac:cd:3f:e7:6c:
7c:87:2d:24:41:01:2d:7d:20:05:32:87:8c:9e:ee:23:a2:c5:
0d:96:d8:81:96:14:30:34:e9:66:bf:70:1d:e0:b4:45:a3:fd:
a4:1d:b4:eb:47:34:75:e4:15:10:93:d5:13:8d:64:97:79:27:
24:e7:f7:33:ff:87:97:3d:f0:d4:da:09:6d:a3:08:e0:4e:90:
b9:75:22:33:8c:dd:f6:cb:45:a1:fb:29:28:7d:44:42:3a:c4:
7f:47:13:be:61:27:35:05:0e:15:1c:d9:5a:67:3c:b6:ee:a6:
df:0c:cb:67:b7:ed:e5:ad:21:e8:3d:ca:46:2f:5c:5b:12:7a:
e2:b6:49:fd:e2:0b:4d:5e:9b:3d:aa:3e:2a:d5:c6:1b:8f:31:
ec:9c:37:1e:bf:85:1c:81:cd:75:ec:9f:bf:cf:00:ad:2f:4c:
9d:ad:9b:53:b0:93:c9:1e:b3:16:5d:34:6a:41:64:01:c1:08:
9d:1d:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org